Unauthenticated Remote Code Execution in OpenHands Software Agent SDK

CVE-2026-112346

What is CVE-2026-112346?

The OpenHands Software Agent SDK prior to version 1.52.0 is susceptible to an unauthenticated remote code execution flaw. This vulnerability arises when the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) while having an empty session_api_keys list, effectively disabling authentication by default. This misconfiguration allows attackers to access the published container port, sending unauthenticated HTTP and WebSocket requests. By exploiting this vulnerability, attackers can execute arbitrary shell commands as root within the sandbox, gain access to the mounted workspace, and read plaintext secrets from the secrets store.

References